$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1088385455558230017/0/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.mft File: CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.mft (raw, json) Hash identifier: 6Ve4vWDPVclrsKb/cFj3CorLf0Yzr6Ro1/oxbdYFGSA= Subject key identifier: 4A:CC:63:3A:53:30:F4:68:C6:F7:D7:FE:E8:3F:96:F3:5B:DE:34:F8 Authority key identifier: CC:A3:BB:73:89:9F:78:33:4C:A0:3D:6D:A4:D8:FD:3F:94:D6:9B:B9 Certificate issuer: /CN=CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9 Certificate serial: 4B58E5376F1AD37A8E95E5A1D9DDEE8EAD374574 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1088385455558230017/0/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.mft Manifest number: AC Signing time: Wed 29 Jul 2026 04:58:29 +0000 Manifest this update: Wed 29 Jul 2026 04:53:29 +0000 Manifest next update: Thu 30 Jul 2026 07:48:29 +0000 Files and hashes: 1: CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.crl (hash: JGd64ZJiunDnC1R0zWwc1smdKsfmdBPQnzlWIlirxo8=) 2: 3130332e3137372e3136322e302f32332d3234203d3e20313439303537.roa (hash: jgtfx24D6pLUOGIrP0FsDFNvF8xIgwwrZ2kQ0C7L36A=) 3: 3136332e35332e35322e302f32322d3234203d3e203531383437.roa (hash: QuYF2uZ6IZ+l3FPWrOqcXWtoS7S46LuH4kJESx2x1Qs=) 4: 3136332e35332e35322e302f32322d3234203d3e20313439303537.roa (hash: uICx57p5+jtBkGMOR0tDJ+Anre9HEKQERsFBp0N7f88=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1088385455558230017/0/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.crl rsync://rpki-rps.cnnic.cn/repo/A1088385455558230017/0/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 07:48:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:58:e5:37:6f:1a:d3:7a:8e:95:e5:a1:d9:dd:ee:8e:ad:37:45:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9 Validity Not Before: Jul 29 04:53:29 2026 GMT Not After : Jul 30 07:48:29 2026 GMT Subject: CN=4ACC633A5330F468C6F7D7FEE83F96F35BDE34F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:93:43:68:9f:b2:7e:9b:74:9b:25:ce:7a:8a: 62:dc:25:7b:e6:28:00:4d:05:d9:12:4d:80:a0:a7: 39:de:3a:bf:4f:f1:09:8c:0d:48:bd:7a:a0:1a:f9: 74:43:ed:70:f9:f1:75:a3:e6:d9:33:fd:e8:c0:40: 94:a3:6c:0e:2a:54:ff:1b:98:37:ed:6c:6c:e5:56: d3:b1:0c:d8:0a:00:26:35:66:ca:d1:2d:47:c3:e1: 1b:86:28:72:04:63:44:14:ec:01:ec:08:8a:fb:a2: c6:53:c4:29:d9:2a:c3:fa:0e:3d:3b:4d:31:71:64: ac:14:6a:eb:74:1a:92:01:15:4d:04:cd:61:4b:e7: 02:8a:8a:11:7f:bb:ac:b2:44:6f:4d:06:30:fc:3a: f9:f2:7a:0f:09:e3:4d:c4:7e:e2:53:8e:c3:7a:61: d4:ba:54:d7:79:d3:fb:a0:0c:ff:44:e7:a3:40:13: d1:8b:12:d5:9c:3e:68:16:52:94:c3:89:56:6f:f0: 6f:24:4b:ad:f1:ff:e9:28:56:62:07:77:3b:21:25: b3:01:70:7b:d2:35:55:38:b0:62:c0:74:da:fc:01: 07:46:8b:f5:a0:23:9c:5b:40:4b:fc:80:64:9e:98: 6a:f8:a2:41:1a:3a:52:cb:df:d8:57:fd:93:7e:72: 44:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:CC:63:3A:53:30:F4:68:C6:F7:D7:FE:E8:3F:96:F3:5B:DE:34:F8 X509v3 Authority Key Identifier: keyid:CC:A3:BB:73:89:9F:78:33:4C:A0:3D:6D:A4:D8:FD:3F:94:D6:9B:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1088385455558230017/0/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1088385455558230017/0/CCA3BB73899F78334CA03D6DA4D8FD3F94D69BB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:bf:b3:88:3c:1a:41:67:56:3e:a1:af:9a:40:59:c6:28:d6: b4:e3:1d:e2:71:de:b2:1a:15:2a:88:3c:1e:47:af:a7:d5:2f: ea:67:ff:b6:e2:df:52:3f:81:f3:e3:58:0a:d3:08:90:68:48: b7:10:7c:b3:10:f8:a2:3b:ad:7c:80:79:c4:99:38:db:8b:b0: 1d:7e:95:47:0b:16:cf:71:65:21:08:be:c4:84:34:20:66:46: b1:92:70:71:b7:03:e2:07:eb:18:4c:1e:d8:a7:37:67:07:4c: 9d:d9:84:94:cf:83:55:a0:b4:cf:75:e1:9d:40:45:6a:5d:f3: 36:41:d8:6b:cc:38:05:ab:47:8d:c8:b1:8f:b5:bf:43:99:3e: 1b:8f:8b:f2:86:49:a0:5a:f1:71:b5:62:2e:e6:33:e6:42:67: 51:2b:87:33:7c:9a:cf:29:9d:aa:1f:0c:7a:64:21:35:7a:da: 96:7e:82:40:fc:1c:25:6e:dc:b7:47:ca:6c:a7:d4:17:4f:9a: b5:e8:4f:45:6e:25:ba:08:0c:3a:b8:a7:b1:fa:dd:4c:fa:06: b0:ad:12:11:b7:ec:da:bc:e8:b0:4f:a9:a0:cc:d0:92:57:01: fc:12:03:fa:03:bc:10:a8:5a:da:f2:42:73:f8:be:cc:d8:d9: b0:a7:67:e4 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUS1jlN28a03qOleWh2d3ujq03RXQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0NBM0JCNzM4OTlGNzgzMzRDQTAzRDZEQTREOEZEM0Y5 NEQ2OUJCOTAeFw0yNjA3MjkwNDUzMjlaFw0yNjA3MzAwNzQ4MjlaMDMxMTAvBgNV BAMTKDRBQ0M2MzNBNTMzMEY0NjhDNkY3RDdGRUU4M0Y5NkYzNUJERTM0RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvk0Non7J+m3SbJc56imLcJXvm KABNBdkSTYCgpzneOr9P8QmMDUi9eqAa+XRD7XD58XWj5tkz/ejAQJSjbA4qVP8b mDftbGzlVtOxDNgKACY1ZsrRLUfD4RuGKHIEY0QU7AHsCIr7osZTxCnZKsP6Dj07 TTFxZKwUaut0GpIBFU0EzWFL5wKKihF/u6yyRG9NBjD8Ovnyeg8J403EfuJTjsN6 YdS6VNd50/ugDP9E56NAE9GLEtWcPmgWUpTDiVZv8G8kS63x/+koVmIHdzshJbMB cHvSNVU4sGLAdNr8AQdGi/WgI5xbQEv8gGSemGr4okEaOlLL39hX/ZN+ckS1AgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUSsxjOlMw9GjG99f+6D+W81veNPgwHwYDVR0j BBgwFoAUzKO7c4mfeDNMoD1tpNj9P5TWm7kwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA4 ODM4NTQ1NTU1ODIzMDAxNy8wL0NDQTNCQjczODk5Rjc4MzM0Q0EwM0Q2REE0RDhG RDNGOTRENjlCQjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0NBM0JCNzM4OTlGNzgzMzRDQTAzRDZEQTREOEZEM0Y5NEQ2OUJCOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwODgzODU0NTU1NTgyMzAwMTcvMC9DQ0EzQkI3Mzg5OUY3 ODMzNENBMDNENkRBNEQ4RkQzRjk0RDY5QkI5Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALb+ziDwaQWdW PqGvmkBZxijWtOMd4nHeshoVKog8Hkevp9Uv6mf/tuLfUj+B8+NYCtMIkGhItxB8 sxD4ojutfIB5xJk424uwHX6VRwsWz3FlIQi+xIQ0IGZGsZJwcbcD4gfrGEwe2Kc3 ZwdMndmElM+DVaC0z3XhnUBFal3zNkHYa8w4BatHjcixj7W/Q5k+G4+L8oZJoFrx cbViLuYz5kJnUSuHM3yazymdqh8MemQhNXraln6CQPwcJW7ct0fKbKfUF0+atehP RW4luggMOrinsfrdTPoGsK0SEbfs2rzosE+poMzQklcB/BID+gO8EKha2vJCc/i+ zNjZsKdn5A== -----END CERTIFICATE-----Generated at Wed Jul 29 23:03:08 2026 by rpki-client